Advisory Published
Updated

CVE-2020-5944

First published: Thu Nov 05 2020(Updated: )

In BIG-IQ 7.1.0, accessing the DoS Summary events and DNS Overview pages in the BIG-IQ system interface returns an error message due to disabled Grafana reverse proxy in web service configuration. F5 has done further review of this vulnerability and has re-classified it as a defect. CVE-2020-5944 will continue to be referenced in F5 Security Advisory K57274211 and will not be assigned to other F5 vulnerabilities.

Credit: f5sirt@f5.com

Affected SoftwareAffected VersionHow to fix
F5 BIG-IQ Centralized Management>=7.1.0<7.1.0.1

Never miss a vulnerability like this again

Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.

Frequently Asked Questions

  • What is CVE-2020-5944?

    CVE-2020-5944 is a vulnerability in BIG-IQ 7.1.0 that causes an error message when accessing the DoS Summary events and DNS Overview pages due to a disabled Grafana reverse proxy in web service configuration.

  • How does CVE-2020-5944 affect F5 BIG-IQ Centralized Management?

    CVE-2020-5944 affects F5 BIG-IQ Centralized Management version 7.1.0, causing errors when accessing certain pages in the system interface.

  • What is the severity of CVE-2020-5944?

    CVE-2020-5944 has a severity rating of 4.3, which is classified as medium.

  • How can I fix CVE-2020-5944?

    To fix CVE-2020-5944, you can enable the Grafana reverse proxy in the web service configuration of BIG-IQ 7.1.0.

  • Where can I find more information about CVE-2020-5944?

    You can find more information about CVE-2020-5944 in the F5 support article: https://support.f5.com/csp/article/K57274211

Contact

SecAlerts Pty Ltd.
132 Wickham Terrace
Fortitude Valley,
QLD 4006, Australia
info@secalerts.co
By using SecAlerts services, you agree to our services end-user license agreement. This website is safeguarded by reCAPTCHA and governed by the Google Privacy Policy and Terms of Service. All names, logos, and brands of products are owned by their respective owners, and any usage of these names, logos, and brands for identification purposes only does not imply endorsement. If you possess any content that requires removal, please get in touch with us.
© 2024 SecAlerts Pty Ltd.
ABN: 70 645 966 203, ACN: 645 966 203